Failure resilient distributed replicated data storage system

ABSTRACT

A failure resilient distributed replicated data storage system is described herein. The storage system includes zones that are independent, and autonomous from each other. The zones include nodes that are independent and autonomous. The nodes include storage devices. When a data item is stored, it is partitioned into a plurality of data objects and a plurality of parity objects calculated. Reassembly instructions are created for the data item. The data objects and parity objects are spread across all nodes and zones in the storage system. Reassembly instructions are also spread across the zones. When a read request is received, the data item is prepared from the lowest latency nodes according to the reassembly instructions. This provides for data resiliency while keeping the amount of storage space required relatively low.

NOTICE OF COPYRIGHTS AND TRADE DRESS

A portion of the disclosure of this patent document contains materialwhich is subject to copyright protection. This patent document may showand/or describe matter which is or may become trade dress of the owner.The copyright and trade dress owner has no objection to the facsimilereproduction by anyone of the patent disclosure as it appears in thePatent and Trademark Office patent files or records, but otherwisereserves all copyright and trade dress rights whatsoever.

BACKGROUND

1. Field

This disclosure relates to data stored in a distributed replicated datastorage system and an improved resilient method for storing andaccessing data in a distributed replicated data storage system.

2. Description of the Related Art

A file system is used to store and organize computer data stored aselectronic files. File systems allow files to be found, read, deleted,and otherwise accessed. File systems store files on one or more storagedevices. File systems store files on storage media such as hard diskdrives and silicon storage devices.

Various applications may store large numbers of documents, images,audio, videos and other data as objects using a distributed replicateddata storage system in which data is replicated and stored in at leasttwo locations.

DESCRIPTION OF THE DRAWINGS

FIG. 1 is a block diagram of a distributed replicated data storagesystem.

FIG. 2 is a block diagram of a storage zone included in a distributedreplicated data storage system.

FIG. 3 is a block diagram of an example fully replicated distributeddata storage system.

FIG. 4 is a block diagram of a first example resilient distributedreplicated data storage system.

FIG. 5 is a flow chart of the actions taken to store or put data in aresilient distributed replicated data storage system.

FIG. 6 is a flow chart of the actions taken to read or get data includedin a resilient distributed replicated data storage system.

FIG. 7 is a block diagram of a second example resilient distributedreplicated data storage system.

DETAILED DESCRIPTION Environment

FIG. 1 is a block diagram of a distributed replicated data storagesystem 100. The distributed replicated data storage system 100 includesat least two storage zones. The distributed replicated data storagesystem 100 includes multiple storage zones that are independent of oneanother, may be geographically dispersed and are in a peer-to-peerconfiguration. In the example shown, the distributed replicated datastorage system 100 includes two storage zones, first storage zone 110and second storage zone 120.

The storage zones 110 and 120 are separated geographically. The storagezones 110 and 120 communicate with each other and share objects overwide area network 130. The wide area network 130 may be or include theInternet. The wide area network 130 may be wired, wireless, or acombination of these. The wide area network 130 may be public orprivate, may be a segregated network, and may be a combination of these.The wide area network 130 includes networking devices such as routers,hubs, switches and the like.

The term data as used herein includes a bit, byte, word, block, stripeor other unit of information. In one embodiment the data is storedwithin and by the distributed replicated data storage system as objects.As used herein, the term data is inclusive of entire computer readablefiles or portions of a computer readable file. The computer readablefile may include or represent text, numbers, data, images, photographs,graphics, audio, video, computer programs, computer source code,computer object code, executable computer code, and/or a combination ofthese and similar information.

Many data intensive applications store a large quantity of data, theseapplications include scientific applications, newspaper and magazinewebsites (for example, nytimes.com and life.com), scientific lab datacapturing and analysis programs, video and film creation software, andconsumer web based applications such as social networking websites (forexample, FACEBOOK), photo sharing websites (for example, FLIKR), videosharing websites (for example, YOUTUBE) and music distribution websites(for example, ITUNES).

FIG. 2 is a block diagram of a storage zone 104 included in adistributed replicated data storage system. The storage zones 110 and120 shown in FIG. 1 are examples of storage zone 104. The storage nodes150 within a storage zone 104 may be connected via a local area network140 by wire lines, optical fiber cables, wireless communicationconnections, and others, and may be a combination of these. The localarea network 140 may include one or more networking devices such asrouters, hubs, switches and the like.

Referring again to FIG. 1, one node in one of the storage zones mayinclude an object management system and/or application program thatautomatically identifies and adapts to impairments in the storage nodes150. That is, software in a node in the storage zone 110 may monitor andrecognize multiple kinds of impairments, including, for example, storagenode failures; storage device failures; storage nodes with diminishedcapacity such as one or more down or diminished drives; storage deviceswith diminished capacity such as bad blocks or sectors; other equipmentfailures; offline nodes; offline storage devices; missing data; impaireddata; and other system anomalies. When the software in a node in thestorage zone recognizes an impairment, the distributed replicated datastorage system may automatically adapt. In a related embodiment, thedistributed replicated data storage system 100 may include anapplication program that automatically identifies impairments inconstituent storage zones and takes remedial action.

The storage zones 110, 120 and 104 may include a computing device and/ora controller on which software may execute. The computing device and/orcontroller may include one or more of logic arrays, memories, analogcircuits, digital circuits, software, firmware, and processors such asmicroprocessors, field programmable gate arrays (FPGAs), applicationspecific integrated circuits (ASICs), programmable logic device (PLDs)and programmable logic array (PLAs). The hardware and firmwarecomponents of the computing device and/or controller may include variousspecialized units, circuits, software and interfaces for providing thefunctionality and features described herein. The processes,functionality and features described herein may be embodied in whole orin part in software which operates on a controller and/or one or morecomputing devices and may be in the form of one or more of firmware, anapplication program, object code, machine code, an executable file, anapplet, a COM object, a dynamic linked library (DLL), a script, one ormore subroutines, or an operating system component or service, and otherforms of software. The hardware and software and their functions may bedistributed such that some actions are performed by a controller orcomputing device, and others by other controllers or computing deviceswithin a storage zone.

A computing device as used herein refers to any device with a processor,memory and a storage device that may execute instructions such assoftware including, but not limited to, server computers, personalcomputers, portable computers, and laptop computers. The computingdevices may run an operating system, including, for example, versions ofthe Linux, Unix, MS-DOS, Microsoft Windows, Solaris, Symbian, Android,Chrome, and Apple Mac OS X operating systems. Computing devices mayinclude a network interface in the form of a card, chip or chip set thatallows for communication over a wired and/or wireless network. Thenetwork interface may allow for communications according to variousprotocols and standards, including, for example, versions of Ethernet,INFINIBAND® network, Fibre Channel, and others. A computing device witha network interface is considered network capable.

Referring again to FIG. 2, the storage zone 104 includes a plurality ofstorage nodes 150 which include a plurality of storage media 160. Eachof the storage nodes 150 may include one or more server computers. Eachof the storage nodes 150 may be an independent network attached storage(NAS) device or system. The term “storage media” is used herein to referto any configuration of hard disk drives, solid-states drives, siliconstorage devices, magnetic tape, or other similar storage media. Harddisk drives and/or other storage media 160 may also be arranged in thestorage nodes 150 according to any of a variety of techniques.

The storage media included in a storage node may be of the samecapacity, may have the same physical size, and may conform to the samespecification, such as, for example, a hard disk drive specification.Example sizes of storage media include, but are not limited to, 2.5″ and3.5″. Example hard disk drive capacities include, but are not limitedto, 500 Mbytes, 1 terabyte and 2 terabytes. Example hard disk drivespecifications include Serial Attached Small Computer System Interface(SAS), Serial Advanced Technology Attachment (SATA), and others. Anexample storage node may include 16 one terabyte 3.5″ hard disk drivesconforming to the SATA standard. In other configurations, the storagenodes 150 may include more and fewer drives, such as, for example, 10,12, 24 32, 40, 48, 64, etc. In other configurations, the storage media160 in a storage node 150 may be hard disk drives, silicon storagedevices, magnetic tape devices, or a combination of these. In someembodiments, the physical size of the media in a storage node maydiffer, and/or the hard disk drive or other storage specification of themedia in a storage node may not be uniform among all of the storagedevices in a storage node 150.

The storage media 160 in a storage node 150 may be included in a singlecabinet, rack, shelf or blade. When the storage media in a storage nodeare included in a single cabinet, rack, shelf or blade, they may becoupled with a backplane. A controller may be included in the cabinet,rack, shelf or blade with the storage devices. The backplane may becoupled with or include the controller. The controller may communicatewith and allow for communications with the storage media according to astorage media specification, such as, for example, a hard disk drivespecification. The controller may include a processor, volatile memoryand non-volatile memory. The controller may be a single computer chipsuch as an FPGA, ASIC, PLD and PLA. The controller may include or becoupled with a network interface.

In another embodiment, multiple storage nodes 150 are included in asingle cabinet or rack such that a storage zone may be included in asingle cabinet. When in a single cabinet or rack, storage nodes and/orconstituent storage media may be coupled with a backplane. A controllermay be included in the cabinet with the storage media and/or storagenodes. The backplane may be coupled with the controller. The controllermay communicate with and allow for communications with the storagemedia. The controller may include a processor, volatile memory andnon-volatile memory. The controller may be a single computer chip suchas an FPGA, ASIC, PLD and PLA.

The rack, shelf or cabinet containing a storage zone may include acommunications interface that allows for connection to other storagezones, a computing device and/or to a network. The rack, shelf orcabinet containing a storage node 150 may include a communicationsinterface that allows for connection to other storage nodes, a computingdevice and/or to a network. The communications interface may allow forthe transmission of and receipt of information according to one or moreof a variety of standards, including, but not limited to, universalserial bus (USB), IEEE 1394 (also known as FIREWIRE® and I.LINK®), FibreChannel, Ethernet, WiFi (also known as IEEE 802.11). The backplane orcontroller in a rack or cabinet containing a storage zone may include anetwork interface chip, chipset, card or device that allows forcommunication over a wired and/or wireless network, including Ethernet.The backplane or controller in a rack or cabinet containing one or morestorage nodes 150 may include a network interface chip, chipset, card ordevice that allows for communication over a wired and/or wirelessnetwork, including Ethernet. In various embodiments, the storage zone,the storage node, the controller and/or the backplane may provide forand support 1, 2, 4, 8, 12, 16, etc. network connections and may have anequal number of network interfaces to achieve this.

The techniques discussed herein are described with regard to storagemedia including, but not limited to, hard disk drives and solid-statedrives. The techniques may be implemented with other readable andwritable storage media.

As used herein, a storage device is a device that allows for readingfrom and/or writing to a storage medium. Storage devices include harddisk drives (HDDs), solid-state drives (SSDs), DVD drives, flash memorydevices, and others. Storage media include magnetic media such as harddisks and tape, flash memory, and optical disks such as CDs, DVDs andBLU-RAY® discs.

In some embodiments, files and other data may be partitioned intosmaller portions and stored as multiple objects among multiple storagemedia 160 in a storage node 150. Files and other data may be partitionedinto smaller portions referred to as objects and stored among multiplestorage nodes 150 in a storage zone. In one embodiment each objectincludes a storage policy identifier and a data portion. The objectincluding its constituent data portion is stored among storage nodes andstorage zones according to the storage policy specified by the storagepolicy identifier included in the object. Various policies may bemaintained and distributed or known to the nodes in all zones in thedistributed replicated storage system. Policies define the replicationand placement of data objects in the data storage system. Examplepolicies include, full distribution, single copy, single copy to aspecific zone, copy to all zone but a specified zone, and others. Thepolicies may be stored on and distributed from a client 102 to thedistributed replicated storage system 100 to all nodes in the storagesystem. A character (e.g., A, B, C, etc.) or number (0, 1, 2, etc.) orcombination of one or more characters and numbers (A1, AAA, A2, BC3,etc.) or other scheme may be associated with and used to identify eachof the policies. The client 102 of the storage system 100 may be acomputing device such as, for example, a personal computer, tablet,mobile phone, workstation or server.

Referring again to FIG. 1, the wide area network 130 connectsgeographically separated storage zones. Each of the storage zonesincludes a local area network 140. The transfer of data between storagenodes in a storage zone is fast compared to communication over the widearea network 130.

Referring now to FIG. 3, a fully replicated distributed data storagesystem 300 is shown. In this configuration, all data is replicated amongall storage zones such that all copies of stored data are available fromand accessible from all storage zones. This is referred to herein as afully replicated storage system. As shown, a data item is partitionedinto data objects D1 through D9. All data objects D1 through D9 areavailable in all three of storage zones 310, 320 and 330. The data itemstored as data objects D1 through D9 may represent one movie, one audiofile, or any portion, full or partial, of any data. In a fullyreplicated storage system, all stored data is accessed from any or allof the storage zones based on various system rules. In a fullyreplicated configuration, the storage zones 310, 320 and 330 arereplicated such that copies of data in all three storage zones are thesame. Replication may be performed synchronously, that is, completedbefore the write operation is acknowledged; asynchronously, that is, thereplicas may be written before, after or during the write of the firstcopy; or a combination of each. Full replication can result in increasedstorage costs, particularly when there are multiple zones and all datais replicated at all zones. Although this configuration provides forresiliency, it may be costly monetarily and may be too costly monetarilyfor some. That is, the monetary cost of the constituent storage mediarequired for full replication may be too high.

In the resilient distributed replicated data storage system describedherein, when writing data to a storage zone, the data may be replicatedin one or more additional storage zones to provide for redundancy suchthat access to data is possible when a zone goes down or is impaired orunreachable, without the need for full replication. The resilientreplication system does not require that each zone have a full copy ofall data objects. The techniques described herein result in a lower costresilient data storage system.

The lower cost is achieved through the use of smaller capacity storagezones (and fewer or smaller capacity storage devices in those storagezones). Because of the monetary cost of data storage devices, theresilient replication system described herein reduces the amount of datastored, requiring a smaller storage capacity which reduces storage mediacosts.

Referring now to FIG. 4, a resilient distributed replicated storagesystem 400 is shown. The resilient distributed replicated data storagesystem 400 includes multiple storage zones that are independent of oneanother, are geographically dispersed and are in a peer-to-peerconfiguration. A client computing device 402 may be used to specify theconfiguration of the distributed replicated storage system 400 and maypromulgate policies or storage criteria for the nodes in the system 400.In this example, a data item is partitioned into nine pieces, dataobjects D1 through D9. Data objects D1, D2 and D3 are stored in storagezone 410, data objects D4, D5 and D6 are stored in storage zone 420, anddata objects D7, D8 and D9 are stored in storage zone 430. Should one ofthe storage nodes in one of the storage zones become impaired, becomeunavailable, become inaccessible or go down, the system may recreate thedata by using available data objects along with parity objects. When thedata objects for the data item are distributed among the three zones,the system creates six parity objects P1 through P6. The system alsocreates reassembly instructions. The reassembly instructions, shown as Rin a triangle in FIG. 4, provide information about how to recreate,reassemble or reconstitute the data item from (in this example, any nineof) the constituent data objects and parity objects. The reassemblyinstructions include which combinations of objects are needed toreassemble the data item. The reassembly instructions take up verylittle storage space. The same reassembly instructions are included ineach zone. In this example, there are nine data objects and six parityobjects. To recreate the data, a combination of any nine objects isneeded. That is, for example, to recreate the data item, six dataobjects and three parity objects may be used. This would be thesituation if one of the three storage zones shown in FIG. 4 cannot beused or accessed to recreate the data item. That is, for example, ifzone 420 is down or inaccessible, the data objects D1, D2, D3, D6, D7,D8 and parity objects P1, P2, P5 from zones 410 and 430 may be used torecreate the data item.

The creation of parity objects may be based upon a number of well-knownerasure coding techniques. In one embodiment, the parity objects arecreated with the Reed-Solomon technique. See James S. Plank “ErasureCodes for Storage Applications,” Tutorial, FAST-2005: 4th UsenixConference on File and Storage Technologies San Francisco, Calif.,December, 2005 and James S. Plank, “A Tutorial on Reed-Solomon Codingfor Fault-Tolerance in RAID-like Systems,” Software—Practice &Experience, 27(9), September, 1997, pp. 995-1012.

The property of interest for such erasure coding techniques is theability to repair the loss of data objects with an equal number ofparity objects using the technique. For example, the calculation ofparity can be used as a simple erasure code. Consider the 8 bit string“10011100”, with the addition of the parity bit of “1” (even parity). Ifthe system presents the string “1001X100” with the parity bit of “1” andthe parity coding is known to be even, the receiver can infer that themissing bit “X” is a “1”. This technique can be generalized to correctas many errors in the stored data as there are parity. The system andmethods described herein are dependent on this general property ofparity erasure codes and not a specific algorithm or implementation.

Referring to the examples shown in FIGS. 3 and 4, as the data item waspartitioned into nine objects, in the fully replicated storage system300 of FIG. 3, the amount of storage space required for a three zonesystem would be three times the size of the data. According to theresilient distributed replicated storage system described herein, a zonewould have enough storage space for five objects and a small amount ofstorage space for reassembly instructions. The example resilientdistributed replicated storage system 400 of FIG. 4 requires less thantwo-thirds of the capacity of the fully replicated storage system 300 ofFIG. 5 while providing for resiliency and access to data. The one-thirdreduction in storage needed may result in significant monetary costsavings while providing the user a desired level of resiliency andaccessibility.

The software running on a controller or computing device in storage zone410 may monitor the health of the other storage zones 420 and 430 and/orthe storage media in the storage zones 420 and 430. When an impending oractual problem or failure is detected in the storage zones 420 or 430,the storage zone 410 may identify this situation as an access alert.After identifying an access alert, the system uses data objects andparity objects to recreate the data according to the reassemblyinstructions. The access alert may be identified by a node, and the nodemay use the reassembly instructions to reassemble the data item bysending requests for data objects and parity objects to other nodes inother zones, if necessary.

In this way a customer of the resilient distributed replicated datastorage system may receive the reliability or service level desired orrequired from a fully replicated storage system at a much lower cost.

The example shown in and described regarding FIG. 4 involves threestorage zones and a single data item partitioned into nine objects. Thetechniques described herein apply to storage systems with multiplestorage zones, regardless of the number of storage zones. The techniquesdescribed herein apply to any sized data item. The techniques describedherein apply to systems with multiple data items. The techniquesdescribed herein require that the total number of data objects andparity objects can be divided evenly among the zones in the particularconfiguration of the resilient distributed replicated data storagesystem. The techniques described herein optionally allow for multiplecopies of data objects and parity objects to be stored to meet thedivided equally requirement among storage zones as well as to increasethe resiliency of the stored object.

Description of Processes

The method used in the intelligent distributed replicated data storagesystem may be described as taking a data item, partitioning it intopieces known as data objects and calculating parity information known asparity objects along with reassembly instructions. The system allows forthe spreading of data objects and parity objects among multiple storagezones to meet the availability and durability requirements of aparticular application or customer. The spreading of the objects amongzones is performed so that the durability of the data item is ensured.The number of data objects and parity objects is chosen to map onto thenumber of zones provided and the required durability. The system mayduplicate parity and data objects to increase the resiliency of thestored item according to the policy requirements.

Referring now to FIG. 5, a flow chart of the actions taken to store orput data in a resilient distributed replicated data storage system isshown. To store or put a data item, the system receives a storagerequest that includes a data item (or reference or link to a data item)and may include storage criteria, as shown in block 510. The storagecriteria may, in different embodiments specify the storage policy forthe data item by a code or name, or may include specific distributioninstructions for the data item. The specific distribution instructionmay include the exact number of data objects and parity objects the dataitem for the data item. In one implementation, the system predeterminesthe number of pieces the item data should be partitioned into accordingto information provided by the user of the system, and all data itemsare partitioned the same way. The number of pieces may be determined inpart based on the storage criteria specified. The number of pieces isdependent on multiple factors, including the number of zones in thestorage system, the specified or desired durability/resiliency of thesystem, and the desired speed of access to the data item. To increasethe resiliency of the storage system, multiple copies of the dataobjects or parity objects may be dispersed among the storage zones. Thenumber of parity objects may be determined in part based on the storagecriteria specified. The number of parity objects is determined based onthe number of pieces and the erasure coding technique used. The systemmay provide a user interface that allows the user to specify informationfor these factors by allowing for explicit entry of numbers (in text ornumerical entry fields, radio button with associated text guides, and/orpull down menus), selection of factors by radio button, slider or otheruser interface item (such as, for example, a sliding scale for each ofaccess speed, resiliency/durability). The number of pieces evaluationmay be performed once during a system install, and may later berecalculated upon a system reconfiguration, such as adding or removing azone, or changing of a desired access speed or resiliency. In anotherimplementation, the number of pieces a data item is to partitioned intomay be hard coded or system defined.

The system then partitions the data item into data objects correspondingto the number of pieces, as shown in block 520. The system also createsparity objects for the data item, as shown in block 530. Thepartitioning into data objects and creating parity objects is achievedaccording to erasure coding techniques by one or more nodes in a zone inthe distributed replicated data storage system.

According to erasure coding, the data item is divided into n pieces andrecoded into n+p total objects, namely n data objects and p parityobjects, such that there will be t total objects. According to erasurecoding, t>n>p. The key property of erasure coding is that the originalitem can be reconstructed from any n objects from the combination ofdata objects and parity objects, where the combined size for the nobjects is equal or greater than the original data item size. Forexample, referring to FIG. 4, when the data item is partitioned intonine data objects n and four parity objects p, the total number ofobjects t is 10 and the number of objects needed to recreate theoriginal data item is n or nine. The erasure coding used may beaccording to the Reed-Solomon techniques or other suitable techniques.

The system then creates reassembly instructions for the data item, asshown in block 540. The reassembly instructions include informationabout the data objects and the parity objects including their objectidentifiers that encode the location of the object.

The system then stores the data objects, parity objects and reassemblyinstructions in the current storage zone, as shown in block 550. Thesystem stores the data objects, parity objects and reassemblyinstructions among the other storage zones according to the policy forthe data item, as shown in block 560. In one embodiment the systemperforms the actions in blocks 550 and 560 concurrently whensynchronized replication is required. The system performs the actions inblocks 550 and 560 sequentially when asynchronous replication issufficient. The system stores the data objects, parity objects andreassembly instructions among the storage zones so that when one zonegoes down, the system can still provide the data item when requested. Inone implementation, the data objects are spread evenly among the storagezones, and there is at least one parity object per storage zone. A copyof the reassembly instructions is stored in every storage zone; thereassembly instructions are the same in each storage zone.

Referring now to FIG. 6, a flow chart of the actions taken to read orget data included in a resilient distributed replicated data storagesystem is shown. The system receives a read request for a data item, asshown in block 610. The system determines the location of data objectsand party objects at lowest latency nodes needed to construct the dataitem by referring to the reassembly information, as shown in block 612.That is, the system retrieves and reviews the reassembly information tolocate sufficient objects to reconstruct the requested data item byreferring to a latency map. The system attempts to reconstruct the dataitem as quickly as possible.

Each node as it operates tracks the time it takes for operations withother nodes. This information about timing concerning operations withother nodes is stored in a list of nodes that includes the historicaltime to reach other nodes or perform operations involving other nodes.This list of nodes and times may be referred to as a latency map or mapof latencies.

When attempting to reconstruct the data item as quickly as possible, thesystem may refer to the map of latencies to other nodes in the system.The object identifier includes the nodes where each object may belocated. The system uses these two pieces of information, the node andthe latency to the node, to attempt to retrieve sufficient objects toreconstruct the item in the shortest time. The system then attempts toobtain the data objects and parity objects for the data item, as shownin block 614.

If one or more lowest latency nodes at which data objects or parityobjects are stored are either impaired or inaccessible as shown in block616, the system determines the location of data objects and parityobjects at not impaired and accessible nodes needed to construct thedata item by referring to the reassembly information and obtains theobjects, as shown in block 630. These may be referred to as alternatenodes, that is, the nodes that are not lowest latency but that are notimpaired and are available. The system constructs the data item fromdata objects and parity objects obtained from not impaired andaccessible nodes identified in the reassembly information, as shown inblock 632, that is, the alternate nodes. The system then constructs thedata item from data objects and parity objects obtained from nodesidentified in the reassembly information, as shown in block 632. Thesystem provides the requested data item to the requester, as shown inblock 650.

When the system attempts to obtain the data objects and parity objectsfor the data item and all the nodes at which the data objects are storedare not impaired and accessible, the system obtains the data objectsfrom lowest latency nodes identified in the reassembly information, asshown in block 620. The system then constructs the data item from dataobjects and parity objects obtained from nodes identified in thereassembly information, as shown in block 622. The system provides therequested data item to the requester, as shown in block 640.

The methods described above and shown in FIGS. 5 and 6 may be performedby and managed by a node included in a zone in a distributed replicateddata storage system in which the independent nodes communicate with eachother. In another embodiment, the methods described above and shown inFIGS. 5 and 6 may be performed by and managed by an independentcomputing device or controller in a storage zone in a resilientdistributed replicated data storage system.

To make the system described herein more resilient and more responsive,a local parity object (or objects) may be created at each zone to assistin recreating any one object in the zone that may not be accessible. Forexample, if the data objects and parity objects from a zone are neededand one of the parity objects or data objects is on a node or drive thatis down, the inaccessible object can be created locally using a locallystored parity object (or objects). This configuration adds another layerof resiliency and reliability to the system.

Referring now to FIG. 7, a block diagram of a second example resilientdistributed replicated data storage system 700 is shown. In theresilient distributed replicated data storage system 700, a local parityobject is created and stored in each zone so that if an object stored inthat zone is not accessible, it may be recreated locally. The use oflocal parity objects (L1, L2 and L3 as shown) increases the resiliencyand data throughput of the system by alleviating the need to accessobjects from other zones to recreate an inaccessible object. In thisexample, a data item is partitioned into nine pieces, data objects D1through D9. Data objects D1, D2 and D3 are stored in storage zone 710,data objects D4, D5 and D6 are stored in storage zone 720, and dataobjects D7, D8 and D9 are stored in storage zone 730. Should one of thestorage zones or a node within a zone become impaired, becomeunavailable, become inaccessible or go down, the system may recreate thedata by using available data objects along with parity objects. When thedata objects for the data item are distributed among the three zones,the system creates six parity objects P1 through P6. In this extraresilient configuration, the system also creates a local parity objectfor each zone. The local parity objects are created using Reed-Solomonerasure coding or any suitable erasure coding scheme. As shown, thesystem creates local parity object L1 for zone 710 based on the dataobjects D1, D2, D3 and parity objects P1, P2 included in the zone. Asshown, the system creates local parity object L2 for zone 720 based onthe data objects D4, D5, D6 and parity objects P3, P4 included in thezone. As shown, the system creates local parity object L3 for zone 730based on the data objects D7, D8, D9 and parity objects P5, 62 includedin the zone.

The system also creates reassembly instructions. The reassemblyinstructions, shown as R in a triangle in FIG. 7, provide informationabout how to recreate, reassemble or reconstitute the data item from (inthis example, any nine of) the constituent data objects and parityobjects. In this configuration, the reassembly instructions also includeinformation needed to recreate an object inaccessible within a storagezone using a local parity object. The reassembly instructions take upvery little space and are small in size. In one embodiment, the samereassembly instructions are included in each zone, and a separate localreassembly instruction object is also provided. In another embodiment,the system reassembly instructions are augmented with local reassemblyinstructions such that the reassembly instruction object is differentfor each zone.

When local parity objects are used, the flow of actions to store a dataitem shown in FIG. 5 is augmented by adding creating a local parityobject or local parity objects between blocks 540 and 550. In addition,the creating reassembly instructions for the data item in block 550 mayinclude creating assembly instructions for objects in each of the zonesbased on the local parity object or objects.

When local parity objects are used, the flow of actions to read or get adata item shown in FIG. 6 is augmented by adding identifying aninaccessible or corrupted drive or object in a node in the zone, andlocally recreating the inaccessible object using the local parity object(or objects) according to local zone reassembly instructions. Theseactions may be taken between blocks 614 and 616, such that the nodedetermines all nodes are not impaired. In this way, a localreconstituted version of the object is obtained from the local zonewithout having to seek the object from a node in a different zone. Thisresults in increased throughput and efficiency of the system and adds alevel of resiliency to the system.

Closing Comments

Throughout this description, the embodiments and examples shown shouldbe considered as exemplars, rather than limitations on the apparatus andprocedures disclosed or claimed. Although many of the examples presentedherein involve specific combinations of method acts or system elements,it should be understood that those acts and those elements may becombined in other ways to accomplish the same objectives. With regard toflowcharts, additional and fewer steps may be taken, and the steps asshown may be combined or further refined to achieve the methodsdescribed herein. Acts, elements and features discussed only inconnection with one embodiment are not intended to be excluded from asimilar role in other embodiments.

As used herein, “plurality” means two or more.

As used herein, a “set” of items may include one or more of such items.

As used herein, whether in the written description or the claims, theterms “comprising”, “including”, “carrying”, “having”, “containing”,“involving”, and the like are to be understood to be open-ended, i.e.,to mean including but not limited to. Only the transitional phrases“consisting of” and “consisting essentially of”, respectively, areclosed or semi-closed transitional phrases with respect to claims.

Use of ordinal terms such as “first”, “second”, “third”, etc.,“primary”, “secondary”, “tertiary”, etc. in the claims to modify a claimelement does not by itself connote any priority, precedence, or order ofone claim element over another or the temporal order in which acts of amethod are performed, but are used merely as labels to distinguish oneclaim element having a certain name from another element having a samename (but for use of the ordinal term) to distinguish the claimelements.

As used herein, “and/or” means that the listed items are alternatives,but the alternatives also include any combination of the listed items.

It is claimed:
 1. A system comprising: a plurality of storage zones,each storage zone comprising a plurality of nodes wherein each nodecomprises a plurality of storage devices and a controller, thecontroller including a processor and memory a first node of a pluralityof nodes included in a first zone of the plurality of zones, the firstnode having instructions which when executed cause a first processorincluded in a first controller in the first node to perform actionsincluding: receiving a storage request from a client of the system tostore a data item partitioning the data item into a plurality of dataobjects, each object including a storage policy identifier and a dataportion creating a plurality of parity objects for the data itemcreating reassembly instructions for the data item storing groups ofsome of the data objects and groups of some of the parity objects andthe reassembly instructions among the nodes included in the storagezones according to a predetermined set of criteria. wherein each of thedata objects are included in at least one of the groups of data objects.wherein each of the parity objects are included in at least one of thegroups of parity objects. wherein the predefined set of criteria ensuresthat the data item can be reconstructed by a accessing a subset of theplurality of data objects and the plurality of the parity objects. 2.The system of claim 1 wherein the storage devices are selected from thegroup including hard disk drives and solid state storage devices.
 3. Thesystem of claim 1 wherein the partitioning the data item partitions thedata item into data objects wherein some of the data objects areduplicated among the storage zones.
 4. The system of claim 1 wherein thepartitioning the data item partitions the data object into data itemsthat are equally divided among the storage zones.
 5. The system of claim1 wherein the partitioning the data item partitions the data object intodata items that are unequally divided among the storage zones.
 6. Thesystem of claim 1 wherein the creating the parity objects creates parityobjects wherein some of the parity objects are duplicated among thestorage zones.
 7. The system of claim 1 wherein the creating the parityobjects creates parity objects that are equally divided among thestorage zones.
 8. The system of claim 1 wherein the creating the parityobjects creates parity objects that are unequally divided among thestorage zones.
 9. The system of claim 1 wherein the partitioning thedata item into a plurality of data objects and the creating a pluralityof parity objects are achieved using a parity generating erasure codingscheme.
 10. The system of claim 9 wherein the parity generating erasurecoding scheme is Reed-Solomon encoding.
 11. The system of claim 1wherein the first node has further instructions which when executedcause the processor in the receiving nodes to perform further actionsincluding: creating at least one local parity object for the zone basedon the received group of parity objects and the received group of dataobjects within the local storage zone. wherein creating reassemblyinstructions for the data item includes creating local reassemblyinstructions, the local reassembly instructions including reference tothe local parity object.
 12. The system of claim 11 wherein the creatinga local parity object is achieved using a parity generating erasurecoding scheme.
 13. The system of claim 12 wherein the parity generatingerasure coding scheme is Reed-Solomon encoding.
 14. The system of claim1 wherein the first node has further instructions which when executedcause the first processor to perform further actions including:receiving a read request for the data item attempting to obtain dataobjects and parity objects to reconstruct the data item from lowestlatency nodes when the lowest latency nodes are not impaired andaccessible, constructing the data item from the data objects and parityobject at the lowest latency nodes according to the reassemblyinstructions when one of the lowest latency nodes is either impaired ornot accessible, constructing the data from the data objects and parityobjects obtained from alternative nodes according to the reassemblyinstructions using a local parity object to allow for recreation of aninaccessible or corrupted one of the parity objects in the group ofparity objects or one of the data objects in the group of data objectsproviding the requested data item to a requester.
 15. The system ofclaim 14 wherein when one of the lowest latency nodes is either impairedor not accessible, reconstituting the node that is either impaired ornot accessible using a local parity object according to local reassemblyinstructions included in the reassembly instructions.
 16. A systemcomprising: a plurality of storage zones, each storage zone comprising aplurality of storage nodes wherein each storage node comprises aplurality of storage devices and a controller, the controller includinga processor and memory a first node of a plurality of nodes included ina first zone of the plurality of zones, the first node havinginstructions which when executed cause a first processor included in afirst controller in the first node to perform actions including:receiving a storage request from a client of the system to store a dataitem, the storage request include (a) the data item or a data itemreference and (b) a storage criteria partitioning the data item into aplurality of data objects, each object including a storage policyidentifier and a data portion according to the storage criteria creatinga plurality of parity objects for the data item according to the storagecriteria creating reassembly instructions for the data item according tothe storage criteria storing a the data objects and the parity objectsamong the nodes among the storage zones according to the storagecriteria storing the reassembly instructions among the storage nodesamong the storage zones wherein each of the data objects are included inat least one of the storage zones wherein each of the parity objects areincluded in at least one of the storage zones wherein the reassemblyinstructions specify how the data item can be reconstructed from asubset of the plurality of data objects and the plurality of parityobjects.
 17. The system of claim 16 wherein the storage devices areselected from the group including hard disk drives and solid statestorage devices.
 18. The system of claim 16 wherein the storage criteriaspecify whether the data objects should be equally divided among thestorage zones, unequally divided among the storage zones, and duplicatedamong the storage zones.
 19. The system of claim 16 wherein the storagecriteria specify whether the parity objects should be equally dividedamong the storage zones, unequally divided among the storage zones, andduplicated among the storage zones.
 20. The system of claim 16 whereinthe storage criteria specify redundancy, latency, and/or resiliencycharacteristics.
 21. The system of claim 16 wherein the storage criteriainclude designated placement for the data objects and the parity objectsamong the storage zones.
 22. The system of claim 16 wherein the storagecriteria are designations of redundancy, latency, and/or resiliencycharacteristics that are processed to determine the distribution of thedata objects and the parity objects among the storage zones.
 23. Thesystem of claim 16 wherein the first node has further instructions whichwhen executed cause the processor in the receiving nodes to performfurther actions including: creating at least one local parity object forthe zone based on the received group of parity objects and the receivedgroup of data objects within the local storage zone. wherein creatingreassembly instructions for the data item includes creating localreassembly instructions, the local reassembly instructions includingreference to the local parity object.
 24. The system of claim 23 whereinthe creating a local parity object is achieved using a parity generatingerasure coding scheme.
 25. The system of claim 24 wherein the paritygenerating erasure coding scheme is Reed-Solomon encoding.
 26. Thesystem of claim 16 wherein the first node has further instructions whichwhen executed cause the first processor to perform further actionsincluding: receiving a read request for the data item attempting toobtain data objects and parity objects to reconstruct the data item fromlowest latency nodes when the lowest latency nodes are not impaired andaccessible, constructing the data item from the data objects and parityobject at the lowest latency nodes according to the reassemblyinstructions when one of the lowest latency nodes is either impaired ornot accessible, constructing the data from the data objects and parityobjects obtained from alternative nodes according to the reassemblyinstructions using a local parity object to allow for recreation of aninaccessible or corrupted one of the parity objects in the group ofparity objects or one of the data objects in the group of data objectsproviding the requested data item to a requester.
 27. The system ofclaim 26 wherein when one of the lowest latency nodes is either impairedor not accessible, reconstituting the node that is either impaired ornot accessible using a local parity object according to local reassemblyinstructions included in the reassembly instructions.